Voice Meme Maker

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill coherently uses a SenseAudio API key to send user-provided text to a TTS service and save an MP3, with no hidden or destructive behavior shown.

This appears safe to install if you intend to use SenseAudio for TTS. Use a dedicated API key, monitor quota or billing, and do not submit private text that you do not want processed by the external service.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Generating audio may consume the user's SenseAudio API quota or credits.

Why it was flagged

The skill authenticates to SenseAudio with a bearer API key, which is expected for a TTS integration and is declared as a prerequisite.

Skill content
API_KEY = os.environ["SENSEAUDIO_API_KEY"] ... "Authorization": f"Bearer {API_KEY}"
Recommendation

Use a dedicated SenseAudio API key with appropriate quota limits, and revoke or rotate it if you stop using the skill.

What this means

Anything provided as meme text may be processed by SenseAudio.

Why it was flagged

User-provided meme text is sent to the external SenseAudio TTS API so it can return generated audio.

Skill content
"text": text ... requests.post("https://api.senseaudio.cn/v1/t2a_v2", ... json=payload)
Recommendation

Avoid sending confidential or personal content unless you are comfortable with SenseAudio processing it.

What this means

Installing the dependency adds code from the Python package ecosystem to the environment.

Why it was flagged

The skill asks the user to install the Python `requests` package as a prerequisite; this is common and purpose-aligned, but it is still an external dependency.

Skill content
pip install requests
Recommendation

Install dependencies from a trusted Python package index in the intended environment, or use an environment where `requests` is already available.